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CLAIMS 

WHAT IS CLAIMED IS: 



1 1 . A method for managing a network of devices, the method comprising: 

2 associating a first set of device management policies with a first network 

3 interface; 

4 associating a second set of device management policies with a second network 

5 interface, wherein the second network interface is different from the first 

6 network interface; 

7 registering a first network device, wherein registration includes identifying the 

8 first network interface as an interface from which the first network device 

9 can be managed; 

10 registering a second network device, wherein registration includes identifying the 

1 1 second network interface as an interface from which the second network 

1 2 device can be managed; 

13 based on the registration of the first network device, managing the first network 

14 device based on the first set of management policies; and 

1 5 based on the registration of the second network device, managing the second 

16 network device based on the second set of management policies. 

1 2. The method of claim 1, wherein the second network interface is communicatively 

2 isolated from the first network interface. 

1 3. The method of claim 2, wherein the second network interface is logically isolated 

2 from the first network interface. 
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1 4. The method of claim 1 , wherein the first network interface and the second 

2 network interface are both associated with the same instance of a management 

3 application. 

1 5 . The method of claim 1 , wherein the first set of management policies is different 

2 from the second set of management policies. 

1 6. The method of claim 5, wherein the first set of management policies includes a 

2 permission to write to the first network device and the second set of management 

3 policies includes a permission to read from but not write to the first network 

4 device. 

1 7. The method of claim 1, wherein the first set of management policies is the second 

2 set of management policies. 

1 8. The method of claim 1, wherein the first network device is configured on a first 

2 network and the second network device is configured on a second network, and 

3 wherein the first network is different from the second network. 

1 9. The method of claim 8, wherein the first network is a public network and the 

2 second network is a private network, and wherein the first network interface is 

3 communicatively uncoupled to the second network interface. 

1 10. The method of claim 1 , wherein the first network device and the second network 

2 device are configured on a same network. 

1 11. The method of claim 1 , further comprising: 
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associating a third network interface with a set of policies that are not regarding 
management of devices, wherein registration of the first and second 
network devices cannot include identifying the third network interface as 
an interface from which the first or second network devices can be 
managed. 

The method of claim 1, further comprising: 

validating whether the first network device is manageable through the first 
network interface by comparing the registration identifying the first 
network interface as an interface from which the first network device can 
be managed with information that specifies all network interfaces from 
which the first network device can be managed. 

The method of claim 1, wherein the registration of the first network device 
includes identifying the first network interface as an only interface from which the 
first network device can be managed, and wherein the registration of the second 
network device includes identifying the second network interface as an only 
interface from which the second network device can be managed. 

A method for registering a managed device for management by a management 
application executing on a computer system having multiple network interfaces, 
the method comprising: 

identifying a first network interface, of the computer system, that is associated 
with a first instance of the management application, as an interface from 
which a first managed device can be managed; 
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7 wherein a second managed device identifies a second network interface, of the 

8 computer system, that is different than the first network interface and that 

9 is associated with the first instance of the management application, as an 

10 interface from which the second managed device can be managed; and 

1 1 responding to management requests that are based on a first set of management 

12 policies that is associated with the first network interface. 

1 15. The method of claim 14, wherein the second managed device responds to 

2 management requests that are based on a second set of management policies that 

3 is associated with the second network interface. 

1 16. The method of claim 15, wherein the first set of management policies is different 

2 from the second set of management policies. 

1 17. The method of claim 16, wherein the first set of management policies includes a 

2 permission to write to the first managed device and the second set of management 

3 policies includes a permission to read from but not write to the first managed 

4 device. 

1 18. The method of claim 15, wherein the first set of management policies is the 

2 second set of management policies. 

1 19. The method of claim 1 5, wherein the first managed device is configured on a first 

2 network and the second managed device is configured on a second network, and 

3 wherein the first network is different from the second network. 
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1 20. The method of claim 1 9, wherein the first network is a public network and the 

2 second network is a private network, and wherein the first network interface is 

3 communicatively uncoupled to the second network interface. 

1 21. The method of claim 1 5, wherein the first network device and the second network 

2 device are configured on a same network. 

1 22. In a computer system on which one or more applications execute, a computer- 

2 readable medium comprising instructions which, when executed by one or more 

3 processors, cause the one or more processors to manage a network of devices by: 

4 associating a first set of device management policies with a first network 

5 interface; 

6 associating a second set of device management policies with a second network 

7 interface, wherein the second network interface is different from the first 

8 network interface; 

9 registering a first network device, wherein registration includes identifying the 

10 first network interface as an interface from which the first network device 

1 1 can be managed; 

12 registering a second network device, wherein registration includes identifying the 

13 second network interface as an interface from which the second network 

14 device can be managed; 

15 based on the registration of the first network device, managing the first network 

16 device based on the first set of management policies; and 
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17 based on the registration of the second network device, managing the second 

18 network device based on the second set of management policies. 

1 23. The computer-readable medium of claim 22, wherein execution of the instructions 

2 by the one or more processors causes the one or more processors to further 

3 manage a network of devices by: 

4 validating whether the first network device is manageable through the first 

5 network interface by comparing the registration identifying the first 

6 network interface as an interface from which the first network device can 

7 be managed with information that specifies all network interfaces from 

8 which the first network device can be managed. 

1 24. In a computer system on which one or more applications execute, a computer- 

2 readable medium comprising instructions which, when executed by one or more 

3 processors, cause the one or more processors to register a managed device for 

4 management by a management application executing on a server computer having 

5 multiple network interfaces by: 

6 identifying a first network interface, of the server computer, that is associated with 

7 a first instance of the management application, as an interface from which 

8 a first managed device can be managed; 

9 wherein a second managed device identifies a second network interface, of the 

10 server computer, that is different than the first network interface and that is 

1 1 associated with the first instance of the management application, as an 

12 interface from which the second managed device can be managed; and 
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13 responding to management requests that are based on a first set of management 

14 policies that is associated with the first network interface. 

1 25. The computer-readable medium of claim 24, wherein the second managed device 

2 responds to management requests that are based on a second set of management 

3 policies that is associated with the second network interface. 

1 26. The computer-readable medium of claim 25, wherein the first set of management 

2 policies is different from the second set of management policies. 

1 27. The computer-readable medium of claim 25, wherein the first set of management 

2 policies is the second set of management policies. 

1 28. The computer-readable medium of claim 24, wherein the first network device and 

2 the second network device are configured on a same network. 

3 29. The computer-readable medium of claim 24, wherein the first managed device is 

4 configured on a first network and the second managed device is configured on a 

5 second network, and wherein the first network is different from the second 

6 network. 

1 30. The computer-readable medium of claim 28, wherein the first network is a public 

2 network and the second network is a private network, and wherein the first 

3 network interface is communicatively uncoupled to the second network interface. 

1 31. An apparatus on which one or more applications execute, the apparatus 

2 comprising: 

3 a network interface; 
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4 a memory; and 

5 one or more processors connected to the network interface and the memory, the 

6 one or more processors configured for 

7 associating a first set of device management policies with a first network 

8 interface; 

9 associating a second set of device management policies with a second 

10 network interface, wherein the second network interface is 

1 1 different from the first network interface; 

12 registering a first network device, wherein registration includes identifying 

13 the first network interface as an interface from which the first 

14 network device can be managed; 

1 5 registering a second network device, wherein registration includes 

16 identifying the second network interface as an interface from which 

1 7 the second network device can be managed; 

18 based on the registration of the first network device, managing the first 

19 network device based on the first set of management policies; and 

20 based on the registration of the second network device, managing the 

21 second network device based on the second set of management 

22 policies. 

1 32. An apparatus on which one or more applications execute, the apparatus 

2 comprising: 

3 a network interface; 

4 a memory; and 
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5 one or more processors connected to the network interface and the memory, the 

6 one or more processors configured for 

7 identifying a first network interface, of a multi-interface computer, that is 

8 associated with a first instance of the management application, as 

9 an interface from which a first managed device can be managed; 

10 wherein a second managed device identifies a second network interface, of 

11 the multi-interface computer, that is different than the first network 

12 interface and that is associated with the first instance of the 

13 management application, as an interface from which the second 

14 managed device can be managed; and 

1 5 responding to management requests that are based on a first set of 

16 management policies that is associated with the first network 

17 interface. 

1 33. A system for managing a network of devices, the system comprising: 

2 means for associating a first set of device management policies with a first 

3 network interface; 

4 means for associating a second set of device management policies with a second 

5 network interface, wherein the second network interface is different from 

6 the first network interface; 

7 means for registering a first network device, wherein registration includes 

8 identifying the first network interface as an interface from which the first 

9 network device can be managed; 
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10 means for registering a second network device, wherein registration includes 

1 1 identifying the second network interface as an interface from which the 

12 second network device can be managed; 

13 means for managing the first network device based on the first set of management 

14 policies; and 

15 means for managing the second network device based on the second set of 

16 management policies. 

1 34. A system that can register for management by a management application 

2 executing on a computer having multiple network interfaces, the system 

3 comprising: 

4 means for identifying a first network interface, of the computer, that is associated 

5 with a first instance of the management application, as an interface from 

6 which the system can be managed; 

7 wherein a second system identifies a second network interface, of the computer, 

8 that is different than the first network interface and that is associated with 

9 the first instance of the management application, as an interface from 

1 0 which the second managed device can be managed; and 

1 1 means for responding to management requests that are based on a first set of 

12 management policies that is associated with the first network interface. 
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